Lucene search
GitHub Advisory DatabaseGHSA-29XX-HCV2-C4CPHistoryFeb 08, 2023 - 10:23 p.m.
openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functions
2023-02-0822:23:39
CWE-476
GitHub Advisory Database
github.com
15
0.001 Low
EPSS
Percentile
47.1%
An invalid pointer dereference on read can be triggered when an application tries to load malformed PKCS7 data with the d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
The result of the dereference is an application crash which could lead to a denial of service attack. The TLS implementation in OpenSSL does not call this function however third party applications might call these functions on untrusted data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openssl-src | lt | 300.0.12 |
References
Related
prion
prion
Null pointer dereference
2023-02-08 20:15:00
openssl
openssl
Vulnerability in OpenSSL CVE-2023-0216
2023-02-07 00:00:00
redhatcve
redhatcve
CVE-2023-0216
2023-02-07 17:28:32
cgr
cgr
CVE-2023-0216 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2023-0216
2023-02-07 00:00:00
osv
osv
openssl-src subject to Invalid pointer dereference in `d2i_PKCS7` functions
2023-02-08 22:23:39
CVE-2023-0216
2023-02-08 20:15:24
Invalid pointer dereference in `d2i_PKCS7` functions
2023-02-07 12:00:00
wolfi
wolfi
CVE-2023-0216 vulnerabilities
2024-06-02 15:23:11
cvelist
cvelist
CVE-2023-0216 Invalid pointer dereference in d2i_PKCS7 functions
2023-02-08 19:03:05
cve
cve
CVE-2023-0216
2023-02-08 20:15:24
alpinelinux
alpinelinux
CVE-2023-0216
2023-02-08 20:15:24
rustsec
rustsec
Invalid pointer dereference in `d2i_PKCS7` functions
2023-02-07 12:00:00
nessus
nessus
Siemens SCALANCE OpenSSL NULL Pointer Dereference (CVE-2023-0216)
2024-01-11 00:00:00
Tenable SecurityCenter 6.0.0 Multiple Vulnerabilities (TNS-2023-07)
2023-03-06 00:00:00
veracode
veracode
NULL Pointer Dereference
2023-02-10 21:36:13
debiancve
debiancve
CVE-2023-0216
2023-02-08 20:15:24
ibm
ibm
Security Bulletin: IBM Event Streams is affected by a denial of service due to OpenSSL vulnerabilities
2023-10-10 13:51:03
openvas
openvas
OpenSSL 3.0 < 3.0.8 Multiple Vulnerabilities - Linux
2023-02-08 00:00:00
OpenSSL 3.0 < 3.0.8 Multiple Vulnerabilities - Windows
2023-02-08 00:00:00
Tenable Nessus 10.2.1 <= 10.4.2 Multiple Vulnerabilities (TNS-2023-11)
2023-05-17 00:00:00
f5
f5
freebsd
freebsd
OpenSSL -- Multiple vulnerabilities
2023-02-07 00:00:00
cloudfoundry
cloudfoundry
USN-5844-1: OpenSSL vulnerabilities | Cloud Foundry
2023-02-24 00:00:00
oraclelinux
oraclelinux
openssl security and bug fix update
2023-02-28 00:00:00
openssl security update
2023-03-01 00:00:00
rocky
rocky
openssl security and bug fix update
2023-03-29 16:47:51
redhat
redhat
(RHSA-2023:1199) Important: openssl security and bug fix update
2023-03-14 13:18:56
(RHSA-2023:0946) Important: openssl security and bug fix update
2023-02-28 07:52:54
almalinux
almalinux
Moderate: openssl security and bug fix update
2023-02-28 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: openssl-3.0.8-1.fc37
2023-02-11 00:33:44
[SECURITY] Fedora 36 Update: openssl-3.0.8-1.fc36
2023-02-22 11:09:09
thn
thn
OpenSSL Fixes Multiple New Security Flaws with Latest Update
2023-02-09 09:51:00
aix
aix
Multiple vulnerabilities in OpenSSL affect AIX
2023-03-21 13:26:15
mageia
mageia
Updated openssl packages fix security vulnerability
2023-04-11 22:02:20
ics
ics
Siemens SCALANCE Family Products
2023-11-16 12:00:00
Siemens SINEC NMS
2024-02-15 12:00:00
gentoo
gentoo
OpenSSL: Multiple Vulnerabilities
2024-02-04 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0330
2023-02-09 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0415
2023-06-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00